Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
File: eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft (raw, json)
Hash identifier: dpIR1vjlQo9wIVhiRfTNkLy1i24Z9MW6LxPMlF5VgWs=
Subject key identifier: F6:6E:8A:64:EA:DD:68:A4:F4:D0:66:DA:D8:7E:94:56:B5:BD:9F:42
Authority key identifier: 7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D
Certificate issuer: /CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
Certificate serial: 01958C601083C47FC01225E5A3F1D24D7A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
Manifest number: 1495
Signing time: Wed 12 Mar 2025 22:01:00 +0000
Manifest this update: Wed 12 Mar 2025 22:01:00 +0000
Manifest next update: Thu 13 Mar 2025 22:01:00 +0000
Files and hashes: 1: 0xD3QLVX-qA3FCr0U1Jkwk4eicg.roa (hash: DgMhk8OacC8J3+2qO2tKPU1mCaj5HskLKduZIM0dEVI=)
2: eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl (hash: BtJaHcxU0iTM6baMLR3ikey2TSkopBgnwXWLMOc7pys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:10:83:c4:7f:c0:12:25:e5:a3:f1:d2:4d:7a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
Validity
Not Before: Mar 12 22:01:00 2025 GMT
Not After : Mar 13 22:01:00 2025 GMT
Subject: CN=f66e8a64eadd68a4f4d066dad87e9456b5bd9f42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:79:4f:e5:6b:6d:39:76:89:d1:5f:00:70:7d:
59:c9:44:2e:b9:2c:7f:69:f3:e3:a7:de:b2:10:44:
f5:68:d1:ed:a2:a2:04:04:a2:71:52:78:45:76:2d:
4e:71:00:d1:91:67:d0:69:9a:9a:44:f8:ef:07:2d:
8d:68:e6:c3:a7:ec:19:76:57:ab:0a:7c:fe:d8:4f:
b2:0d:4d:c5:8e:e0:c2:b1:4c:93:b2:67:56:70:3b:
8d:86:cc:53:29:98:7d:79:ce:6f:40:f3:4b:71:66:
f1:c2:24:ea:87:02:ef:d6:7b:6f:36:ce:07:c0:cf:
c2:6a:a7:ea:3c:3e:95:2a:3a:ad:19:7e:aa:45:a6:
87:9b:62:ad:bc:83:65:6f:62:46:87:3e:5e:5c:e4:
34:df:17:7c:93:75:05:95:52:50:25:90:7b:8d:c6:
64:9b:5c:4b:aa:94:ac:42:3b:10:f6:46:51:12:f8:
a4:7a:d5:c2:0b:95:83:e6:0f:21:4e:ae:28:db:0f:
be:fe:27:55:e9:27:d2:6c:c6:0e:14:38:83:37:e2:
36:b4:ac:46:e5:bb:c2:0c:d7:9a:f0:48:a8:99:e2:
f7:95:c7:de:02:03:ee:e2:80:98:79:16:1f:fb:88:
3f:84:39:d7:05:dd:7a:d5:3d:12:ea:e7:89:c0:db:
12:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6E:8A:64:EA:DD:68:A4:F4:D0:66:DA:D8:7E:94:56:B5:BD:9F:42
X509v3 Authority Key Identifier:
keyid:7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:27:36:4e:92:b2:0c:ef:3f:39:aa:8d:66:4a:b2:fb:fc:63:
3b:0c:18:f6:af:9b:10:89:04:65:d4:75:1a:8c:41:24:4f:d6:
b5:29:ea:d9:88:a0:f1:75:f5:56:fd:1b:94:d9:5c:86:23:c8:
18:9f:c9:ef:0f:94:78:17:6f:55:5c:8a:3c:3f:3e:c5:ec:3d:
83:32:1f:40:62:82:f8:51:68:08:63:3f:3f:42:a7:a5:4b:87:
4b:7b:fa:17:b1:d0:c9:82:b7:13:7e:46:12:7e:99:76:e4:43:
e5:69:8c:80:5d:13:fe:85:d8:69:4f:66:d9:5a:ca:84:94:75:
d4:28:d0:73:a3:5a:22:c5:19:a7:6d:12:40:e7:ac:23:34:5e:
60:a4:3e:f8:9e:04:1f:91:6f:d2:aa:fb:b0:cb:8a:05:42:df:
9c:af:e9:df:48:0b:2e:84:94:cc:ad:af:4f:73:dc:38:00:72:
04:e7:ca:d5:6c:5e:ed:3c:a9:9a:62:c5:f4:e0:eb:ba:41:b6:
fc:3d:50:77:71:ba:12:7d:44:e9:ab:10:d5:d7:df:b6:d7:94:
80:95:eb:a1:17:7e:07:17:8f:f2:38:65:f1:6f:2b:93:62:7e:
7a:83:89:7c:1d:25:e1:ff:81:c2:56:1f:a2:3c:f7:7c:aa:26:
d1:6c:41:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMYBCDxH/AEiXlo/HSTXpOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhODY3ZDJjMWEyOTA1ZDU0MzIxZjAxYTcxMGIyMWVkN2Fi
ZDg1N2QwHhcNMjUwMzEyMjIwMTAwWhcNMjUwMzEzMjIwMTAwWjAzMTEwLwYDVQQD
EyhmNjZlOGE2NGVhZGQ2OGE0ZjRkMDY2ZGFkODdlOTQ1NmI1YmQ5ZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3lP5WttOXaJ0V8AcH1ZyUQuuSx/
afPjp96yEET1aNHtoqIEBKJxUnhFdi1OcQDRkWfQaZqaRPjvBy2NaObDp+wZdler
Cnz+2E+yDU3FjuDCsUyTsmdWcDuNhsxTKZh9ec5vQPNLcWbxwiTqhwLv1ntvNs4H
wM/CaqfqPD6VKjqtGX6qRaaHm2KtvINlb2JGhz5eXOQ03xd8k3UFlVJQJZB7jcZk
m1xLqpSsQjsQ9kZREviketXCC5WD5g8hTq4o2w++/idV6SfSbMYOFDiDN+I2tKxG
5bvCDNea8EiomeL3lcfeAgPu4oCYeRYf+4g/hDnXBd161T0S6ueJwNsS8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZuimTq3Wik9NBm2th+lFa1vZ9CMB8GA1UdIwQY
MBaAFHqGfSwaKQXVQyHwGnELIe16vYV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW9aOUxCb3BCZFZESWZBYWNRc2g3WHE5aFgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yYTc3M2ItZWZhMC00YjQwLTk4NjEt
NmQ2ZjU1OGE3ZDY1LzEvZW9aOUxCb3BCZFZESWZBYWNRc2g3WHE5aFgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8yYTc3M2ItZWZhMC00YjQwLTk4NjEtNmQ2ZjU1OGE3ZDY1
LzEvZW9aOUxCb3BCZFZESWZBYWNRc2g3WHE5aFgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaSc2TpKy
DO8/OaqNZkqy+/xjOwwY9q+bEIkEZdR1GoxBJE/WtSnq2Yig8XX1Vv0blNlchiPI
GJ/J7w+UeBdvVVyKPD8+xew9gzIfQGKC+FFoCGM/P0KnpUuHS3v6F7HQyYK3E35G
En6ZduRD5WmMgF0T/oXYaU9m2VrKhJR11CjQc6NaIsUZp20SQOesIzReYKQ++J4E
H5Fv0qr7sMuKBULfnK/p30gLLoSUzK2vT3PcOAByBOfK1Wxe7TypmmLF9ODrukG2
/D1Qd3G6En1E6asQ1dfftteUgJXroRd+BxeP8jhl8W8rk2J+eoOJfB0l4f+BwlYf
ojz3fKom0WxBMg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:55:34 2025 by rpki-client